Re: Implementing hooks

Previous message: jmjonesat_private: "Re: More Input from User Space"
In reply to: David Wheeler: "Implementing hooks"
Next in thread: Andrew Morgan: "Re: Implementing hooks"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

caseyat_private

David Wheeler wrote:

> Option 2: Call the function only if non-null
>   err = security_ops->ioperm ? security_ops->ioperm() : 0;
>   /* If resulting branch causes a stall, this could be worse, but by
>      avoiding the call setup & execution, this may be better.
>      The compiler should optimize this so retrieval of "security_ops->ioperm"
>      will actually occur only once, though I haven't checked this. */

We have been using this mechanism in Irix for years,
for exactly this purpose. It has been very successful.

-- 

Casey Schaufler				Manager, Trust Technology, SGI
caseyat_private				voice: 650.933.1634
casey_pat_private			Pager: 888.220.0607

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module